Privacy Policy

SellHelm ("the Service") is an Amazon seller analytics and PPC management tool operated by CZG USA Inc., 677 N Washington Blvd #57, Sarasota, FL 34236, United States ("we", "us"). This policy describes what data we collect when you use sellhelm.com, why we collect it, and how we protect it.

1. Data we collect

Account data. Your email address, display name and a salted password hash. We never store your password in readable form.

Amazon authorization tokens. When you connect an Amazon Advertising or Selling Partner account, Amazon issues us OAuth refresh tokens. We store these encrypted at rest (AES-256-GCM). We never see or store your Amazon password.

Amazon business data. Through the official Amazon APIs, and only after your explicit consent on Amazon's own authorization pages, we retrieve business data of your seller account: campaign and keyword metrics, orders and sales aggregates, inventory levels, fees, and product listing content. We do not request or store Amazon buyers' personal data (no names, addresses or contact details of your customers).

Technical data. Server logs (IP address, timestamp, requested URL) kept for security and abuse prevention. With your consent, privacy-friendly product analytics (page views, feature usage).

2. What we use it for

To provide the Service: showing your advertising performance, computing profit and inventory analytics, executing the automation rules you configure, and sending you service notifications. We do not sell or rent your data, and we do not use your business data for advertising.

Improving the Service. We use what we learn from running the Service to improve it — the methods and decision rules our tooling applies. That improvement is expressed as general methodology, never as your data: we do not combine data from different sellers' accounts to produce statistics, benchmarks or market insights, and we do not share or sell your data, individually or in aggregate, to anyone. Data obtained through Amazon's APIs is used only to provide the Service to you.

3. Legal basis

Performance of contract (providing the Service you signed up for), legitimate interest (security, abuse prevention, and improving the Service) and consent (analytics cookies), under the EU General Data Protection Regulation (GDPR).

4. Analytics and advertising partners

With your consent we load third-party measurement scripts: Google Analytics (usage statistics), Contentsquare (how pages are used), and the OpenAI and Meta (Facebook) advertising pixels (so we can tell which ads led to a sign-up). These run only after you accept in the cookie banner, and never before. We do not send them your Amazon business data.

You can change your mind at any time, and it takes effect immediately:

5. Where your data lives

Data is hosted on servers in the European Union (Hetzner Online GmbH, Germany). Traffic is proxied through Cloudflare, Inc. for security and performance. Amazon API traffic goes directly to Amazon's endpoints in the region of your seller account.

6. Retention and deletion

Your data is retained while your account is active. If you disconnect an Amazon account, its tokens are deleted immediately; retrieved business data is deleted within 30 days. If you delete your SellHelm account, all associated data is deleted within 30 days, except where law requires longer retention.

7. Your rights

You may request access to, correction of, export of, or deletion of your personal data at any time by writing to [email protected]. You may also lodge a complaint with your local data protection authority.

8. Amazon data protection

Our use of Amazon APIs is governed by Amazon's Acceptable Use Policy and Data Protection Policy. We only request the API roles the Service's features require, we do not retrieve buyer personally identifiable information, and we protect all Amazon-sourced data with encryption in transit (TLS) and at rest.

9. Contact

Questions about this policy or your data: [email protected]